CBC: Does CBC detect or block any modifications to the Windows "hosts" network file?
book
Article ID: 288236
calendar_today
Updated On:
Products
Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
Issue/Introduction
Does CBC detect or block any modifications or replacement of the Windows "hosts" network file?
Environment
- Endpoint Standard Sensor
- Endpoint Standard Sensor UI
- Windows: All versions
Resolution
No, not "out of the box" (as of February 2021).
This capability is being considered with "DETECT-2398".
Additional Information
There are still the standard policy rules that can be written to accomplish this.
Feedback
thumb_up
Yes
thumb_down
No